
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json)
Hash identifier: TxLOYBTmu/v7SWZA+eQqVy3DMxlxQXEC/E5GrA/PMvA=
Subject key identifier: 94:B4:04:10:8F:1F:76:29:07:C0:20:B8:6A:3C:11:76:3F:A6:65:FF
Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Certificate serial: 1372
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
Manifest number: 135A
Signing time: Tue 22 Sep 2026 16:54:27 +0000
Manifest this update: Tue 22 Sep 2026 16:54:26 +0000
Manifest next update: Tue 29 Sep 2026 16:54:26 +0000
Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: orbX6qDrRWj8A/mKAi3uiXu4AXFtV5dT/AK5eLbZ09I=)
2: 35615A30C84511ED90A61540C4F9AE02.roa (hash: ikwRwX6HznSAvB0gllaQ7OaCqCsraBq8/S0KLelO+q8=)
3: 3489528EC84511ED90A61540C4F9AE02.roa (hash: IAHu/i87YCurf7TsutZ4NJzzxkW8+ff7z519ukOdfYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4978 (0x1372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Validity
Not Before: Sep 22 16:54:26 2026 GMT
Not After : Sep 29 16:54:26 2026 GMT
Subject: CN=6ab2b2c3-5072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:9c:40:1a:ec:b7:2c:cd:84:32:15:92:e7:
30:42:40:70:08:09:8e:74:ff:62:14:fe:2c:11:62:
96:90:d8:7e:15:be:9a:b5:f4:3d:da:0d:47:f7:6e:
05:af:51:e0:35:b0:f1:d7:01:21:84:6d:b2:99:db:
26:a7:00:81:d5:c0:39:ca:f8:27:f7:c3:57:cf:7d:
84:03:93:e3:d6:85:e7:ae:fd:01:08:d6:5a:13:98:
7a:8e:af:9e:c8:10:f9:ed:a1:e4:b5:ed:7f:92:58:
ed:2d:51:a0:9f:14:09:d8:13:b6:a7:37:be:11:e5:
1c:23:d3:b8:52:80:42:f9:7e:cd:8c:7b:86:33:d0:
af:ef:fa:48:63:13:4a:b0:f9:4e:3b:63:2d:90:59:
05:28:f6:5b:45:07:9d:87:e1:eb:f6:15:c6:96:75:
4c:03:de:35:51:e3:ad:3b:23:6c:99:5d:cc:24:13:
55:17:03:36:be:13:82:aa:91:f5:18:33:0b:58:23:
e1:3c:53:6a:69:85:b5:04:61:54:32:7d:13:40:6d:
10:0a:dd:83:83:fc:ea:54:29:21:2b:8b:83:61:00:
7e:1e:80:b9:72:84:11:68:70:48:80:83:e5:68:78:
27:ac:dd:9a:6b:79:e4:f4:83:2f:19:10:f8:3b:e5:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B4:04:10:8F:1F:76:29:07:C0:20:B8:6A:3C:11:76:3F:A6:65:FF
X509v3 Authority Key Identifier:
keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:7b:6b:a3:ea:04:e6:4b:b9:1b:51:f7:1b:83:3d:d9:9d:28:
00:6c:ad:b5:54:d8:46:ff:97:5f:92:b5:ac:da:60:19:8e:2a:
61:9a:12:a4:48:cd:d8:fb:77:62:84:46:94:05:92:3b:df:f5:
e0:3a:36:cb:c6:f0:83:c4:40:b2:12:32:9b:d5:08:2b:7c:3b:
83:b3:32:5d:dc:a5:c0:b6:76:fa:46:74:e5:37:da:1c:6f:8b:
35:e1:db:23:8d:37:30:02:4b:7b:fe:36:be:82:5e:64:41:f5:
bb:a7:ca:01:65:c1:51:2f:b0:8e:1a:25:0e:51:71:b9:3d:fd:
8c:2d:b5:bd:07:3d:6c:f5:83:12:d5:84:f2:cd:fe:1e:f1:d5:
30:38:44:6d:f5:fa:d2:eb:8e:70:1c:50:29:1c:56:dd:5c:a6:
bb:00:68:b1:6d:2e:81:76:83:8e:f6:38:c7:11:70:5b:11:9b:
c2:cd:34:47:e0:83:ec:6c:13:49:3d:92:07:f0:28:02:15:d4:
f6:cf:85:e3:50:94:07:40:a9:eb:7d:47:a9:24:5f:67:6b:06:
9e:4f:87:4a:07:c1:c1:b8:8a:16:e3:5d:51:0a:26:34:25:bc:
19:22:bb:9d:3d:f6:57:72:c2:7b:ed:89:54:64:27:75:53:3d:
39:27:87:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:07:48 2026 by rpki-client